CVE-2020-36790

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix a memory leak

We forgot to free new_model_number

A memory leak was found in the NVMe target’s configfs interface, where a dynamically allocated model number string was not freed after configuration. The vulnerability requires privileged access (CAP_SYS_ADMIN) and cannot be triggered by unprivileged users. It may lead to minor memory exhaustion if repeatedly invoked in systems running NVMe targets.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.